EUVD-2015-8990

Malware in sbrugna...

EUVD-2019-2408

Malware in sbrugna...

EUVD-2021-17220

Malware in sbrugna...

EUVD-2019-5329

Malware in sbrugna...

EUVD-2019-5348

Malware in sbrugna...

EUVD-2023-37203

Malicious code in bioql PyPI...

EUVD-2023-37207

Malicious code in bioql PyPI...

CVE-2023-33018

Memory corruption while using the UIM diag command to get the operators name...

CVE-2021-30289

Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2019-14074

u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice ...

CVE-2019-10604

Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag command response packet, in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9607,...

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2023-33014

Information disclosure in Core services while processing a Diag command...

Information disclosure

Information disclosure in Core services while processing a Diag command...

CVE-2023-33014

Technical details for CVE-2023-33014 are not publicly provided in the connected documents. The available entries mention information disclosure in Core services during a Diag command, but do not specify affected products/versions or a fix. Monitor for updates.

CVE-2023-33014 Improper Input Validation in Services

Information disclosure in Core services while processing a Diag command...

PT-2024-12373 · Unknown · Coreservices

Name of the Vulnerable Software and Affected Versions: Core services affected versions not specified Description: The issue is related to information disclosure in Core services when processing a Diag command. Recommendations: At the moment, there is no information about a newer version that...

CVE-2023-33018

Memory corruption while using the UIM diag command to get the operators name...

CVE-2023-28551

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments...

CVE-2023-33018

CVE-2023-33018 describes a memory corruption in the Qualcomm UIM (User Identity Module) related to the diag command used to retrieve the operator’s name. The CVE is rated HIGH with a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW attack complexity, LOW privileges required, no user interact...